Re: So...
Or uMatrix.
Javascript in emails or webpages is biggest threat after a malicious/rogue/idiot user in someone's office. AV is useless really and dangerous with false positives.
Then we have various kinds of Autorun, USB HID based attacks and people "deliberately" clicking on stupid web links in search or opening stupid email attachments. AV and/or script blocking isn't a substitute for user training,
Biting the hand that feeds IT
